Possible (1 to 10%)

Every one of the 165 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Buffer overflow in Web Calendar in Ipswitch IMail 7.04 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.CVE-2001-1287Ipswitch · 9.9% likely

   Ipswitch

2. ws_mail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code via shell metacharacters in the kill parameter.CVE-2001-1343Cgicentral · 9.8% likely
3. Safe Mode feature (safe_mode) in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restrictions and read arbitrary files using "L…CVE-2002-0229Php · 9.6% likely

   PHP

4. Buffer overflow in mIRC 5.91 and earlier allows a remote server to execute arbitrary code on the client via a long nickname.CVE-2002-0231Khaled Mardam-Bey · 9.6% likely

   Khaled Mardam-Bey

5. Directory traversal vulnerability in Phusion web server 1.0 allows remote attackers to read arbitrary files via a ... (triple dot dot) in the HTTP request.CVE-2002-0288Bbshareware.com · 8.8% likely
6. Cross-site scripting vulnerability in eXtreme message board (XMB) 1.6x and earlier allows remote attackers to execute script as other XMB users by inserting the script into an IMG…CVE-2002-0316Xmb Software · 8.7% likely

   Xmb Software

7. Thunderstone Texis CGI script allows remote attackers to obtain the full path of the web root via a request for a nonexistent file, which generates an error message that includes…CVE-2002-0266Thunderstone Software · 8.5% likely
8. Directory traversal vulnerability in CesarFTP 0.98b and earlier allows remote authenticated users (such as anonymous) to read arbitrary files via a GET with a filename that contai…CVE-2001-1335Aclogic · 8.2% likely

   Aclogic

9. Buffer overflow in Galacticomm Worldgroup web server 3.20 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long HTTP GE…CVE-2002-0335Galacticomm Technologies · 7.8% likely
10. Cross-site scripting vulnerability in fom.cgi of Faq-O-Matic 2.712 allows remote attackers to execute arbitrary Javascript on other clients via the cmd parameter, which causes the…CVE-2002-0230Faq-O-Matic · 7.7% likely
11. service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long service argument.CVE-2002-0348Sun · 7.7% likely

    Sun Microsystems

12. telnet95.exe in Pragma InterAccess 4.0 build 5 allows remote attackers to cause a denial of service (crash) via a large number of characters to port 23, possibly due to a buffer o…CVE-2001-1263Pragma Systems · 7.6% likely

    Pragma Systems

13. Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered, which makes it easier for remote attackers to conduct bru…CVE-2001-1339Anybus · 7.5% likely

    CWE-307

14. Agora.cgi 3.2r through 4.0 while in debug mode allows remote attackers to determine the full pathname of the agora.cgi file by requesting a non-existent .html file, which leaks th…CVE-2002-0215Steve Kneizys · 7.5% likely
15. PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pathname of the server via the HTTP OPTION…CVE-2002-0240Apache · 7.4% likely

    Apache

16. Lucent VitalSuite 8.0 through 8.2, including VitalNet, VitalEvent, and VitalHelp/VitalAnalysis, allows remote attackers to bypass authentication via a direct HTTP request to the V…CVE-2002-0236Lucent · 7.4% likely

    Lucent

17. Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service via an HTTP request for an MS-DOS device name.CVE-2002-0200Cyberstop · 7.3% likely
18. PHP for Windows, when installed on Apache 2.0.28 beta as a standalone CGI module, allows remote attackers to obtain the physical path of the php.exe via a request with malformed a…CVE-2002-0249Apache · 7.2% likely

    Apache

19. Cross-site scripting vulnerability in edituser.php for pforum 1.14 and earlier allows remote attackers to execute script and steal cookies from other users via Javascript in a use…CVE-2002-0319Powie · 7.2% likely

    Powie

20. Buffer overflows in Lotus Domino R5 before R5.0.7a allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS L…CVE-2001-1311Ibm · 7.0% likely

    IBM

21. Buffer overflow in Yahoo! Messenger 5.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long (1) message or (2) IMvironment field.CVE-2002-0320Yahoo · 7.0% likely

    Yahoo

22. index.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5, allows remote attackers to execute arbitrary PHP code by specifying a URL to the m…CVE-2002-0206Francisco Burzi · 6.5% likely

    Francisco Burzi

23. admin.cgi in Active Classifieds Free Edition 1.0, and possibly commercial versions, allows remote attackers to modify the configuration, gain privileges, and execute arbitrary Per…CVE-2001-1290Active Web Suite Technologies · 6.5% likely
24. Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to (1) service.cgi or (2) aler…CVE-2002-0346Sun · 6.5% likely

    Sun Microsystems

25. Cross-site scripting vulnerability in sgdynamo.exe for Sgdynamo allows remote attackers to execute arbitrary Javascript via a URL with the script in the HTNAME parameter.CVE-2002-0375Ecometry · 6.4% likely
26. Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute script via (1) the admin login page, or (2) the Pipermail index summaries.CVE-2002-0388Gnu · 6.3% likely

    GNU

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.